Micro Focus 脆弱性

タイムライン

タイプ

Not Defined122
Log Management Software17
Access Management Software7
Automation Software7
Reporting Software4

製品

Micro Focus Service Manager14
Micro Focus Arcsight Logger13
Micro Focus Enterprise Server11
Micro Focus Enterprise Developer11
Micro Focus Solutions Business Manager10

修復

Official Fix80
Temporary Fix0
Workaround0
Unavailable0
Not Defined91

悪用可能性

High3
Functional1
Proof-of-Concept12
Unproven0
Not Defined155

アクセスベクター

Not Defined0
Physical0
Local8
Adjacent18
Network145

認証

Not Defined0
High6
Low89
None76

ユーザー操作

Not Defined0
Required53
None118

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤412
≤526
≤638
≤737
≤830
≤921
≤106

CVSSv3 Temp

≤10
≤20
≤31
≤417
≤523
≤636
≤740
≤828
≤921
≤105

VulDB

≤10
≤21
≤32
≤433
≤529
≤635
≤729
≤833
≤93
≤106

NVD

≤10
≤20
≤30
≤40
≤59
≤618
≤732
≤834
≤916
≤1027

CNA

≤10
≤20
≤32
≤41
≤52
≤65
≤79
≤89
≤94
≤104

ベンダー

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k50
<2k77
<5k44
<10k0
<25k0
<50k0
<100k0
≥100k0

本日のエクスプロイト

<1k165
<2k5
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Products (82): Access Manager (3), AcuToWeb (1), Application Lifecycle Management (1), Application Performance Management (4), ArcSight Enterprise Security Manager (4), ArcSight Logger (4), ArcSight Management Center (6), Arcsight Logger (13), Business Manager (5), CMS (1), COBOL Server (1), Client for OES (1), Content Manager (3), Data Center Automation Containerized Suite (2), Data Protector (3), Dimensions CM Plugin (1), Dimensions Plugin (2), Directory and Resource Administrator (1), Enterprise Developer (11), Enterprise Server (11), Enterprise Test Server (1), Filr (5), Fortify Audit Workbench (1), Fortify Software Security Center (4), GroupWise (1), GroupWise Web (1), Host Access Management (1), Hybrid Cloud Management Containerized Suite (2), IDOL (1), Identity Manager (1), Manager (1), NetIQ (2), NetIQ Access Manager (3), Network Automation (2), Network Operations Management Suite (2), Novell Groupwise (3), Novell Service Desk (4), OpenText (1), Operation Agent (1), Operation Bridge (1), Operation Bridge Manager (1), Operation Bridge Reporter (4), Operation bridge Manager (1), Operations Agent (3), Operations Bridge (2), Operations Bridge Containerized (1), Operations Bridge Containerized Suite (3), Operations Bridge Manager (2), Operations Manager i (1), Operations Orchestration (1), Portfolio Management Center (3), Project (3), RUMBA (3), Real User Monitoring Software (1), Reflection Security Gateway (1), Reflection ZFE (1), Reflection for the Web (1), Rumba FTP (1), Secure API Manager (1), Secure Messaging Gateway (3), Security Server (1), Self Service Password Reset (3), Service Management Automation (1), Service Management Automation Suite (2), Service Manager (14), Service Manager Automation (1), Service Manager Chat Server (1), Service Manager Chat Service (1), Service Manager Release Control (1), SiteScope (1), Solution Business Manager (1), Solutions Business Manager (10), UCMDB Browser (1), Universal CMDB (3), Universal CMDB Foundation (1), Verastream Host Integrator (4), Vibe (2), VisiBroker (3), Visual COBOL (1), Voltage SecureMail Mail Relay (1), ZENworks (1), ZENworks Configuration Management (1)

Link to Vendor Website: https://www.microfocus.com/

公開済みBaseTemp脆弱性Prod悪修復EPSSCTICVE
2023年12月09日4.64.5Micro Focus ArcSight Management Center クロスサイトスクリプティング未知Not DefinedOfficial Fix0.000450.09CVE-2020-25835
2023年09月13日9.89.6Micro Focus OpenText 弱い認証未知Not DefinedOfficial Fix0.000910.07CVE-2023-4501
2023年08月11日7.37.3Micro Focus ArcSight Management Center Privilege Escalation未知Not DefinedNot Defined0.000500.00CVE-2023-32267
2023年07月20日6.66.6Micro Focus Enterprise Server Enterprise Server Common Web Administration 特権昇格未知Not DefinedNot Defined0.000490.00CVE-2023-32265
2023年07月19日3.83.8Micro Focus Dimensions CM Plugin 弱い認証Jenkins PluginNot DefinedNot Defined0.000490.00CVE-2023-32263
2023年06月17日3.53.4Micro Focus Dimensions Plugin 特権昇格Jenkins PluginNot DefinedOfficial Fix0.000660.00CVE-2023-32261
2023年06月16日3.53.5Micro Focus Dimensions Plugin 情報の漏洩Jenkins PluginNot DefinedNot Defined0.000660.00CVE-2023-32262
2023年06月14日4.84.7Micro Focus ArcSight Logger クロスサイトスクリプティングLog Management SoftwareNot DefinedOfficial Fix0.000520.02CVE-2023-24469
2023年06月14日7.37.2Micro Focus ArcSight Logger XML External EntityLog Management SoftwareNot DefinedOfficial Fix0.000650.00CVE-2023-24470
2022年12月23日7.27.2Micro Focus ZENworks Managed Device 特権昇格未知Not DefinedNot Defined0.001600.00CVE-2022-38757
2022年12月17日4.34.2Micro Focus GroupWise Web GW Web 情報の漏洩未知Not DefinedOfficial Fix0.000790.03CVE-2022-38756
2022年12月08日5.65.6Micro Focus Operations Bridge Containerized クロスサイトスクリプティングVirtualization SoftwareNot DefinedOfficial Fix0.000780.00CVE-2022-38754
2022年11月21日5.35.2Micro Focus Filr 情報の漏洩未知Not DefinedOfficial Fix0.001170.00CVE-2022-38755
2022年09月01日5.25.2Micro Focus ArcSight Logger クロスサイトスクリプティングLog Management SoftwareNot DefinedNot Defined0.000780.00CVE-2022-26331
2022年09月01日5.85.8Micro Focus ArcSight Logger クロスサイトスクリプティングLog Management SoftwareNot DefinedNot Defined0.001580.02CVE-2022-26330
2022年05月13日3.53.5Micro Focus NetIQ Access Manager クロスサイトスクリプティングAccess Management SoftwareNot DefinedNot Defined0.000720.03CVE-2021-22531
2022年05月03日2.42.4Micro Focus NetIQ Access Manager クロスサイトスクリプティングAccess Management SoftwareNot DefinedOfficial Fix0.000720.06CVE-2022-26325
2022年05月03日3.93.9Micro Focus NetIQ Access Manager URL RedirectAccess Management SoftwareNot DefinedOfficial Fix0.000720.02CVE-2022-26326
2022年04月12日7.37.3Micro Focus Operations Bridge Remote Code Execution未知Not DefinedNot Defined0.005250.00CVE-2021-38125
2022年02月05日3.53.4Micro Focus Voltage SecureMail Mail Relay 情報の漏洩未知Not DefinedOfficial Fix0.000650.04CVE-2021-38130
2022年01月26日5.35.3Micro Focus Operations Agent Local Privilege Escalation未知Not DefinedNot Defined0.000420.04CVE-2021-38129
2022年01月15日3.53.5Micro Focus ArcSight Enterprise Security Manager クロスサイトスクリプティング未知Not DefinedNot Defined0.000720.00CVE-2021-38127
2022年01月15日3.53.5Micro Focus ArcSight Enterprise Security Manager クロスサイトスクリプティング未知Not DefinedNot Defined0.000720.00CVE-2021-38126
2021年09月28日4.34.1Micro Focus Directory and Resource Administrator 情報の漏洩未知Not DefinedOfficial Fix0.000650.00CVE-2021-22535
2021年09月28日8.08.0Micro Focus ArcSight Enterprise Security Manager 特権昇格未知Not DefinedNot Defined0.010920.00CVE-2021-38124

146 非表示のエントリあり

🔒 Login Required

You need to signup and login to see more of the remaining 146 results.

◂ 前概要次 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!